Synology DSM 4.3-3827 (article.php) - Blind SQL Injection Vulnerability

Synology DSM versions 4.3-3827 and below suffer from a remote blind SQL injection vulnerability. Title: Synology DSM Blind SQL Injection Version affected: :80/ Cookie: PHPSESSID=; visitday= Host: Connection: Keep-alive Accept-Encoding: gzip,deflate User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64...

Synology DSM 4.3-3827 - 'article.php' Blind SQL Injection

Title: Synology DSM Blind SQL Injection Version affected: :80/ Cookie: PHPSESSID=; visitday= Host: Connection: Keep-alive Accept-Encoding: gzip,deflate User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/28.0.1500.63 Safari/537.36 Accept: /...

Threat Outbreak Alert: Fake Personal Photo Sharing Email Messages on March 6, 2014

Medium Alert ID: 33226 First Published: 2014 March 6 15:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a personal photo for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Personal Photo Notification Email Messages on March 4, 2014

Medium Alert ID: 33175 First Published: 2014 March 5 14:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain photos for the recipient. The text in the email message attempts to convince the recipient to open the attachment...

OkCupid: XSS - okcupid.com

Go to your profile, and go to upload a photo. Add a random description to the photo and upload it. Now go to your photos and go to the latest uploaded photo to edit the description, and paste this : and click Save and you will see the XSS. Regards, Florin...

Threat Outbreak Alert: Fake Product Photo Attachment Notification Email Messages on March 1, 2014

Medium Alert ID: 33143 First Published: 2014 March 3 15:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product photo attachment for the recipient. The text in the email message attempts to convince the recipient to...

Bluetooth Photo Share Pro 2.0 iOS - Multiple Vulnerabilities

Bluetooth Photo Share Pro 2.0 iOS - Multiple Vulnerabilities Document Title: =============== Bluetooth Photo Share Pro v2.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1218 Release Date: ============= 2014-02-27...

Private Camera Pro 5.0 iOS - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Document Title: =============== Private Camera Pro v5.0 iOS - Multiple Web Vulnerabilities Product & Service Introduction: =============================== Private Camera is an iPhone and iPad camera app that could protect your privacy. It...

Private Camera Pro 5.0 iOS - Multiple Vulnerabilities

Private Camera Pro 5.0 iOS - Multiple Vulnerabilities Document Title: =============== Private Camera Pro v5.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1216 Release Date: ============= 2014-02-24 Vulnerability...

Hacker removed Mark Zuckerberg's Facebook Timeline Cover Photo

Something unusual happened today, Mark Zuckerberg's Facebook Timeline Cover Photo is removed, as shown in the above Screenshot. Suddenly, after few hours, I got a mail from an Egyptian Hacker with nickname 'Dr.FarFar', claimed that he has hacked the Mark Zuckerberg's Facebook Profile and removed...

Updated darktable package fixes two vulnerabilities

Updated darktable package fixes security vulnerabilities: Darktable before version 1.2.3 contains an embedded copy of LibRaw that incorrectly handled photo files. If a user was tricked into processing a specially crafted photo file, darktable could be made to crash, resulting in a denial of servi...

WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1192 Release Date: ============= 2014-02-07 Vulnerability Laboratory ID VL-ID: ====================================...

Threat Outbreak Alert: Fake Personal Photo Email Messages on January 27, 2014

Medium Alert ID: 32602 First Published: 2014 January 28 15:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a picture for the recipient. The text in the email message attempts to convince the recipient to open the...

Angry Birds and other Mobile Gaming apps leaking your private information to NSA

Are you fond of playing games on your Smartphone like Angry Birds or Subway Surfer?? You should now stop wasting your time, because NSA is utilizing your gaming energy in the best possible way. According to the latest documents leaked by former U.S. Government contractor Edward Snowden, Some of t...

WordPress Infocus Theme Cross Site Scripting

Infocus Theme DOM Based XSS Details ======= Product: Infocus Theme DOM Based XSS Security-Risk: Moderate Remote-Exploit: yes Company: RHAINFOSEC Website: http://services.rafayhackingarticles.net Vendor-URL: http://themeforest.net/item/infocus-powerful-professional-wordpress-theme/85486...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on January 20, 2014

Medium Alert ID: 32501 First Published: 2014 January 21 16:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a photo for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on January 20, 2014

Medium Alert ID: 32493 First Published: 2014 January 21 16:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a photo for the recipient. The text in the email message attempts to convince the recipient to open the...

DEBIAN-CVE-2013-1438

Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a 1 divide-by-zero, 2 infinite loop, or 3 NULL pointer dereference...

CVE-2013-1438

Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a 1 divide-by-zero, 2 infinite loop, or 3 NULL pointer dereference...

CVE-2013-1438

Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a 1 divide-by-zero, 2 infinite loop, or 3 NULL pointer dereference...